Dictionary type problem

2013-07-11 Thread Muhammad Nadeem
hi everybody I am adding some new attributes to dictionary.motorola. but when i run freeradius , it gives the follwoing error. including dictionary file /usr/local/etc/raddb/dictionary Errors reading dictionary: dict_init: /usr/local/share/freeradius/dictionary.motorola[78]: invalid type

Re: Dictionary type problem

2013-07-11 Thread Ming-Ching Tiew
From: Muhammad Nadeem mnadeem8...@gmail.com To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, July 11, 2013 2:08 PM Subject: Dictionary type problem hi everybody I am adding some new attributes to dictionary.motorola.

Re: Dictionary type problem

2013-07-11 Thread Alan DeKok
Muhammad Nadeem wrote: it clearly indicates that it doesnot support hexadecimal type. Could anyone please tell me , whts the alternative of this. Maybe you can try reading the documentation to learn about the dictionary file format. See man dictionary. Or even read the raddb/dictionary

Re: Dictionary type problem

2013-07-11 Thread Muhammad Nadeem
thnaks ,, it is fixed On Thu, Jul 11, 2013 at 11:59 AM, Alan DeKok al...@deployingradius.comwrote: Muhammad Nadeem wrote: it clearly indicates that it doesnot support hexadecimal type. Could anyone please tell me , whts the alternative of this. Maybe you can try reading the

Re: Loading fails without reporting an error

2013-07-11 Thread Alan DeKok
Lovaas,Steven wrote: Hello again, I've successfully gotten to the point where local authentication is working well for all modes, using multiple SSIDs through two virtual servers, so I felt confident jumping into the less familiar world of proxying. Not that the concept is hard to

freeradius seeing anonymous identity as username

2013-07-11 Thread sebastian buettrich
hello all, not really a problem, just a question out of interest: i m reconfiguring a freeradius server for eduroam and extended use of rlm_perl for all kinds of fun stuff, and when testing, i notice that all requests containing an anonymous identity @mydomain.org (regardless of where they

Re: freeradius seeing anonymous identity as username

2013-07-11 Thread Phil Mayers
On 11/07/13 09:39, sebastian buettrich wrote: is this expected behaviour, the way anonymous identities are implemented, Yes. The outer EAP virtual server only sees the anonymous identity. The inner EAP virtual server can see the real identity. - List info/subscribe/unsubscribe? See

Re: Indexing multi-valued attrbutes (was RE: 3.0)

2013-07-11 Thread Alan DeKok
Brian Julin wrote: Just to make sure it was understood during the foreach fixup patch I sent on github, I mentioned that indexed attribute accesses were broken. None of var[#] var[2] or var[*] work in xlats, unless that's been fixed recently. That's been fixed. Alan DeKok. - List

Re: Loading fails without reporting an error

2013-07-11 Thread Adam Bishop
On 11 Jul 2013, at 08:40, Alan DeKok al...@deployingradius.com wrote: Lovaas,Steven wrote: Hmm... it looks like there's a problem with the file. It doesn't stop, it *exits*. See doc/bugs. That should help finding out where it's exiting. I think I saw this issue a week or so ago - I've

Changing proxy server for a specific user

2013-07-11 Thread Angel L. Mateo
Hello, I have defined a DEFAULT realm proxying requests to a remote radius server (for eduroam). Now I want to create another virtual server using this DEFAULT realm, but proxying requests to another radius server. Is there any way to do this? Maybe modifying some attribute in the

Reject a specific realm from a client

2013-07-11 Thread David Aldwinckle
Hello, I have two clients that proxy access requests to me. The realm varies, but the format is always userid@realm.whatever Is there a way that I can deny a specific realm when an access request is received from a specific client? I tried adding something to policy.conf but I couldn't get

Re: Changing proxy server for a specific user

2013-07-11 Thread Alan DeKok
Angel L. Mateo wrote: Now I want to create another virtual server using this DEFAULT realm, but proxying requests to another radius server. Realms are global. You cannot have two DEFAULT realms. Is there any way to do this? Maybe modifying some attribute in the request with an

[ANN] Version 3.0.0-rc0

2013-07-11 Thread Arran Cudbard-Bell
We are now in feature freeze for 3.0. The configuration format and behaviour for 3.0 will be stable between now and the final release. If you are planning on deploying 3.0 and have an existing 2.x.x configuration you were planning to migrate when the 3.0 is released, now would be a good time

Re: PEAP using different CA?

2013-07-11 Thread Mathieu Simon
Hi Fernando 2013/7/10 Fernando Hammerli fhamme...@puc-rio.br Got it now, as you said. Using the public CA certs on certificate_file (and related private key), and included the public CA chain on the CA_file (together with my own CA). Yep mostly except that I put the private key not inside

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Fajar A. Nugraha
On Thu, Jul 11, 2013 at 7:28 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: We are now in feature freeze for 3.0. The configuration format and behaviour for 3.0 will be stable between now and the final release. If you are planning on deploying 3.0 and have an existing 2.x.x

RE: Loading fails without reporting an error

2013-07-11 Thread Lovaas,Steven
Thanks, Adam... this got me looking at the right thing. I had a mismatch between the type of the home_server localhost (auth), and the attribute used in one of the realms pointing to the pool that references that home server (pool, instead of auth_pool). Changing the type of the localhost

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Arran Cudbard-Bell
On 11 Jul 2013, at 14:09, Fajar A. Nugraha l...@fajar.net wrote: On Thu, Jul 11, 2013 at 7:28 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: We are now in feature freeze for 3.0. The configuration format and behaviour for 3.0 will be stable between now and the final release. If

RE: [ANN] Version 3.0.0-rc0

2013-07-11 Thread stefan.paetow
Did you mean https://github.com/FreeRADIUS/freeradius- server/archive/release_3_0_0_rc0.tar.gz ? I'm afraid I'm getting a build error (from fresh): HEADER src/include/features.h HEADER src/include/missing.h HEADER src/include/tls.h CC jlibtool.c CC src/lib/dict.c CC src/lib/filters.c CC

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Olivier Beytrison
On 11.07.2013 16:44, stefan.pae...@diamond.ac.uk wrote: Did you mean https://github.com/FreeRADIUS/freeradius- server/archive/release_3_0_0_rc0.tar.gz ? I'm afraid I'm getting a build error (from fresh): [snip] /usr/bin/ld: cannot find -lregex collect2: ld returned 1 exit status make: ***

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Arran Cudbard-Bell
On 11 Jul 2013, at 16:01, Olivier Beytrison oliv...@heliosnet.org wrote: On 11.07.2013 16:44, stefan.pae...@diamond.ac.uk wrote: Did you mean https://github.com/FreeRADIUS/freeradius- server/archive/release_3_0_0_rc0.tar.gz ? I'm afraid I'm getting a build error (from fresh): [snip]

RE: [ANN] Version 3.0.0-rc0

2013-07-11 Thread stefan.paetow
Hi Arran, thanks, that's built now. All, CentOS-compatible RPMS, SRPM and .tar.bz2 are at: https://www.dropbox.com/sh/sbqyy7gvzrd3egt/rCKE7aMnku/FreeRADIUS Regards Stefan -Original Message- From: freeradius-users- bounces+stefan.paetow=diamond.ac...@lists.freeradius.org

mod_auth_radius w/Apache 2.4.4 ??

2013-07-11 Thread laurence.schuler
I'm trying to use mod_auth_radius(-2.0) with apache 2.4.4 and it does not appear to be working properly. It complains: [:warn] [pid 14690] AuthRadiusActive set, but no RADIUS server IP - missing AddRadiusAuth in this context?) When I have AuthRadiusAuth set, and I can confirm it by changing the

maintaining reSIProcate compatibility with FreeRADIUS

2013-07-11 Thread Daniel Pocock
Hi, A few years ago, I adapted the RADIUS client code from SER to work in reSIProcate and specifically the SIP proxy, repro I'm now reviewing the code to work out how to extend it for reTurn, the TURN server and to see if any other changes are necessary. Things have changed slightly since

How to best configure Radius for my domain ?

2013-07-11 Thread Analyser Great
I am not sure what I am doing wrong but I am just banging my head on a simple problem. I am trying to upgrade from radius 1 to radius 2 and will be using an entire set of new configuration. Currently, I am checking an Ldap attribute dialupaccess to allow users to get access to vpn / network

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Doug Hardie
On 11 July 2013, at 06:09, Fajar A. Nugraha l...@fajar.net wrote: On Thu, Jul 11, 2013 at 7:28 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: We are now in feature freeze for 3.0. The configuration format and behaviour for 3.0 will be stable between now and the final release.

Re: [ANN] Version 3.0.0-rc0

2013-07-11 Thread Arran Cudbard-Bell
On 11 Jul 2013, at 22:39, Doug Hardie bc...@lafn.org wrote: On 11 July 2013, at 06:09, Fajar A. Nugraha l...@fajar.net wrote: On Thu, Jul 11, 2013 at 7:28 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: We are now in feature freeze for 3.0. The configuration format and behaviour